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RAP.KfiRQUND OF THE INVENTION 
The present invention relates generally to systems and methods for controlling 
access to an area. More particularly, the present invention relates to a system and 
associated method for controlling access to a designated area having a security device 

to control access thereto. 

Frequently, homeowners need to be personally present at their homes for service 
personnel. For example, homeowners need be present at their homes to receive 
delivered packages. In many situations, however, homeowners need to attend to other 
matters and may not personally receive packages at their homes. 

If a homeowner cannot be present to receive a package, a delivery person may 
opt to leave the package outside the home. But this option raises a theft concern. 
Providing the delivery person a home key is another option. This option, however, 
raises a security concern because of the ease of key copying. Also, the delivery person 
with the home key has access to the home indefinitely. 

The security concern associated with an unattended package delivery exists not 
only at homes but also at other locations, such as a lock box or a storage room. 
Likewise, a similar security concern exists when a package needs to be picked up from 
an unattended location or when a repair service needs to be performed at an 
unattended location. 

SUMMARY OF THE INVENTION 
Accordingly, the- present invention is directed to a system and method for 
controlling access to a designated area that obviate one or more of the limitations and 
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..advantages of prior art systems and methods. The advantages and purposes of the 
invention - be se, forth in par, in the description which foilows. and in part wi be 
„ b vK,us from the description, or may be learned by practice of the invention. The 

and combinations particularly pointed out in the appended claims. 

To attain the advantages and in accordance with the purposes of the invention, 
as embodied and broadly described herein, the invention is directed to a system for 
centreing access to a designated area. The designated area has a security de.ee to 
oen.ro! access thereto. The system includes a programmable unR, a programming unrt, 
. programmable tag, and a vacation system. The programmable unit generates a flrst 
and second Key for each access to the designated area. The programming un,. 
generates an access Key using the f,rs. Key. The programmable tag stores the access 
key The validation system includes a control unit, a memory, and a communication 
device The control unit generates a validation Key using the second Key. The memory 
sto res the validation Key. The communication device establishes a data communication 
with the programmable teg to receive the access Key therefrom. The-contro, unrt 
spares the access Key and the validation Key and causes the security device to allow 
access to the designated area if the access Key matches the validation Key. 

,„ another aspect, the invention is directed to a method for controlling access to a 
designated area. The designated area has a securrty device to control access thereto. 
The method steps includes: generating a flrst and second Key for each access to the 
designated area; using the flrst Key, generating an access Key; using the second Key, 
generating a validation Key; and comparing the access Key and the validation Key and 
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causing the security device to allow access to the designated area if the access key 

matches the validation key. 

It is to be understood that both the foregoing general description and the 
following detailed description are exemplary and explanatory only and are not restrictive 
of the invention, as claimed. 



R p| FF ncQPRIPTION OFTHF DRAWINGS 
The accompanying drawings are included to provide a further understanding of 
the invention and are incorporated in and constitute a part of this specification. The 
drawings illustrate an embodiment of the invention and, together with the description, 
serve to explain the principles of the invention. In the drawings, 

Fig. 1 is a schematic block diagram of an access control system and its 
components in accordance with the present invention; 

Fig. 2 is a block diagram illustrating access control steps in accordance with the 

present invention; and 

Fig. 3 lists arbitrary and exemplary numerical values of various keys and other 
data used in describing the access control steps illustrated in Fig. 2. 
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nFTAlLED DESCRIPTION 
Reference will now be made in detail to the presently preferred embodiment of 
the present invention, an example of which is illustrated in the accompanying drawings. 
Wherever possible, the same reference numbers will be used throughout the drawings 
to refer to the same or like parts. An exemplary embodiment of a system for controlling 
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access ,0 a designated area is shown in Fig. 1 and is designated generally by reference 

number 10. 

For the purposes of the following description, the term "key" refers to an 
arrangement of numbers, characters, symbols, or any combination thereof, which may 
be recognized by (1) both a programmable device and a human or (2) a programmable 

device alone. 

in accordance with the present invention and illustrated in Fig. 1 , an access 
control system 10 includes a programmable unit 12, a programming unit 14, a 
programmable tag 16, a validation system 18. and a security device 38. Security device 
38 is installed on a security barrier (e.g., door) of a designated area (e.g., «by area, 
foyer, storage room, lock box. or garage). By locking or unlocking the security barrier, 
security device 38 controls access to the designated area. Preferably, security device 
38 is an demonically controlled locking mechanism, such as an electronic lock, or a 

garage door opener. 

As will be explained in greater detail below, programmable unit 12 generates an 
agent key and a customer key for each access to a designated area. Accordingly, any 
programmable device capable of generating an agent and customer key may serve as 
programmable unit 12. For example, desktop or portable personal computers, 
workstations, microprocessors, or Personal Digital Assistants (PDAs) may all serve as 
programmable unit 12. Preferably, programmable unit 12 is part of a computer system 
(no. shown, that includes a data repository (not shown). Multiple programmable units 
12 may be connected, or connectable, to the data repository through a wired, or 
wireless, data network. 
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Programming unit 14 ,s interfaced with programmable unit 12 to receive the 
agent Key. Programmable unit 12 and programming unit 14 may exist as independent 
unfts. Alternatively, they may be integrated into a single unit as indicated at 15 in Fig. 1 
After receiving the agent key from programmable unit 12, programming unit 14 
generates an access key using the agent key and stores the access key in 
programmable tag 16. As wil, be explained in greater detail below, programmable teg 
16 establishes a date communication w*h a communication device 28 through a wired 
or wireless connection to transmit the stored access key thereto. Accordingly, 
programmable teg 16 may be any device that is capable of storing and transmMing the 

access key. 

Validation system 18 includes a control unit 26, an input device 32, and a 
memory 34. Validation system 18 controls the operate of security device 38 through 
control unit 26. The customer key generated in programmable unit 12 is entered into 
vacation system 18 through input device 32. Input device 32 then sends the customer 
key to control unit 26. Using the customer key, control unit 26 then generates a 
vacation key and stores it in memory 34. Subsequently, as will be explained in greater 
detail below, control unit 26 activates security device 38 to allow access to the 
designated area if a certain condition is satisfied. Preferably, control unit 26 is a 
microprocessor or similar electronic control and includes an internal clock 29 to keep 
track of time and date. Input device 32 is preferably a keypad although the present 
invention encompasses other input devices. Memory 34 is preferably a nonvolatile 
memory, which does no. lose its stored data when the electric power source is 
removed. 
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Validation system 18 further includes a communication device 28, a proximity 
detector 30, and an antenna 36. Proximity detector 30 monitors a limited area outside 
the designated area for a presence of an object. Upon sensing an object, proximity 
detector 30 sends a signal to control unft 26. Control unit 26 then causes 
communication device 28 to start transmitting signals through antenna 36 to establish a 
data communication with programmable tag 16. 

Preferably, programmable tag 16 and communication device 28 communicate 
wirelessly using radio frequency (RF) signals. Accordingly, programmable tag 16 and 
communication device 28 respectively include transceivers 1 7 and 25 for a wireless 
data communication therebetween. Alternatively, programmable tag 16 and 
communication device 28 may also communicate through a wired connection. For 
example, validation system 18 may include a drfferent communication device, such as a 
programmable tag reader 27 exposed outside the designated area and interfaced to 
control unit 26. A wired data communication is then established by inserting 
p r ogrammabletag16intoprogrammab,etagreader27. Communication device 28, 
proximity detector 30 and antenna 36 may be eliminated from validation system 1 8 if 
programmable tag reader 27 is utilized for a wired data communication. Alternatively, 
validation system 18 may include both communication device 28 and programmable tag 
reader 27 so that validation system 18 can establish both a wired and wireless data 
communication with programmable tag 16. 

Fig. 2 illustrates the access control steps in detail. Fig. 3 lists exemplary 
numerical values of various keys and other data used in describing the access control 
steps of Fig. 2. The numerical values listed in Fig. 3 are arbitrary and exemplary in 
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nature and should not be interpreted to expressly define or limit the scope of the present 
invention. Fig. 3 is presented solely for the purposes of explaining the principles of the 
present invention. Furthermore, instead of numerical values, the present invention may 
utilize numbers, characters, symbols, or any combination thereof for various keys and 
other data. 

As previously described, programmable unit 12 generates an agent key and a 
customer key for each access to a designated area. The agent that will access the 
designated area receives the agent key. On the other hand, the customer authorizing 
an unattended access to a designated area receives the customer key. As i.lustrated 
at 40, programmable unit 12 first randomly generates an encryption key (e.g., 065) for 
each access to a designated area. Then, programmable unit 12 generates the agent 
key by combining the encryption key with a piece of information about the designated 
area. On the other hand, programmable unit 12 generates the customer key by 
combining the same encryption key with a piece of information about the agent. 
Preferably, the agent key includes the encryption key and the address (e.g., 4215) of 
the designated area as indicated at 42. The customer key preferably includes the same 
encryption key and the agent code (e.g., 18818) as indicated at 44. 

in addition to the agent key, the agent receives, either directly from the customer 
or from other entities requesting the agent's service, other access data such as the 
address of the designated area and the access date (e.g., 039, Julian Date for February 
8, 2000). The agent then enters the agent key, its agent code, the access date, and the 
address into programming unit 14 as indicated at 46. The agent separately receives 
and enters the address of the designated area although the agent key includes the 
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address. Programming unit 14 may convert the separately-received address into 
whichever form is suitable for a subsequent comparison with the address in the agent 
key. For example, if the separately-received address is in a text form and the address 
in the agent key is a numeric address, programming unit 14 converts the text address 
into its corresponding numeric address. Preferably, programming unit 14 and 
programmable unit 12 are interfaced so that programming unit 14 receives the agent 
key and other access data from programmable unft 12 and performs necessary 
operations without any manual input by the agent. 

Subsequently, programming unit 14 performs an internal validation before 
generating an access key. Specifically as indicated at 48, programming unit 14 
compares the address in the agent key with the separately-entered address. If they 
match, using the encryption key, programming unit 14 enc W ts the agent code, the 
access date, and the address as indicated at 50, and thereby generates an encrypted 
access key (e.g., 065(18818+039+4215)). Finally, programming unit 14 stores the 
encrypted access key in programmable tag 16. Preferably, programmable tag 16 is a 
portable device that can store either a single or multiple encrypted access keys for 
multiple different addresses and/or different access dates. 

On the other hand, the customer receives, either directly from the agent or from 
other entities requesting the agent's service, the customer key and other access data 
such as the access date and the agent code. As indicated at 52 in Fig. 2, the customer 
then enters the customer key, the agent code, the address of the designated area, and 
the access date into validation system 18 using input device 32. . The customer 
separately receives the agent code although the customer key includes the same agent 
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code. Validation system 1 8 may convert the separately-received agent code into 
whichever form is suitable for a subsequent comparison with the agent code in the 
customer key. For example, if the separately-received agent code is the agent's name 
(e.g., Federal Express) and the agent code in the customer key is in a numeric form, 
validation system 18 coverts the name of the agent into its corresponding numeric agent 
code when the customer enters the name of the agent into input device 32. 

After the customer enters the customer key, the separately-received agent code, 
the access date, and the address of the designated area, control unit 26 performs an 
internal validation before generating a validation key. Specifically, control unit 26 
compares the agent code in the customer key and the separately-entered agent code 
as indicated at 54. If they match, using the encryption key, control unit 26 encrypts the 
agent code, the access date, and the address as indicated at 56, and thereby generates 
an encrypted validation key (e.g., 065(18818+039+4215)). Finally, control unit 26 
stores the encrypted validation key in memory 34. By repeating the steps described 
above, the customer can store in memory 34 of validation system 18 multiple validation 
keys corresponding to multiple different agents and/or different access dates. 

On the access date, control unit 26 activates proximity detector 30 to monitor a 
limited area outside the customer's designated area for an object (e.g., agent's vehicle 
or agent's employee). Alternatively, proximity detector 30 may be active all the time so 
that control unit 26 needs not activate and/or deactivate it on a particular access date. 
When proximity detector 30 senses an object, control unit 26 causes communication 
device 28 to begin transmitting radio frequency (RF) signals through antenna 36. Thus, 
when the agent's employee or vehicle arrives at the designated area and triggers 
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proximity detector 30, communication device 28 will initiate and establish a wireless 
data communication with programmable teg 16. 

Programmable tag 16 may be physically carried by the agent's employee or may 
be left in a vehicle that the agent's employee operates. As previously mentioned, 
programmable tag 16 may contain either a single or multiple enc W ted access keys for 
multiple different addresses and/or different access dates. Also, in case of a package 
delivery, programmable tag 16 may be removably attached to the package. 

Programmable tag 16 detects the radio frequency signals transmitted from 
communication device 28 and responds by transmitting the encrypted access key 
stored therein. At the same time, programmable tag 1 6 transmits other access 
information such as the programmable tag number and the identity of the agent's 
employee accessing the designated area (e.g., John Smith or Employee Identification 
Number). After communication device 28 receives the encrypted access key and other 
access information, it sends them to control unit 26. Control unit 26 then compares the 
encrypted access key with the encrypted validation key stored in memory 34 for the 
current date. If the encrypted access key matches the encrypted validation key, control 
unit 26 activates securfty device 38 to allow the agent's employee access to the 
designated area as indicated at 58 in Fig. 2. 

Control unit 26 keeps security device 38 activated only for a predetermined 
period of time. After the predetermined period of time, control unit 26 deactivates 
security device 38 to terminate the access to the designated area. Preferably, control 
unit 26 is programmed so that it prevents further access to the designated area after the 
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departing from the scope or spirit of the invention. Other embodiments of the invention 
will be apparent to those skilled in the art from consideration of the specfflcation and 
practice of the invention disclosed herein. It is intended that the specification and 
examples be considered as exemplary only, with a hue scope and spirit of the invention 
being indicated by the following claims. 
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